Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
File: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft (raw, json)
Hash identifier: HI5neySkuUuh3h7JK2Hy9o4WWHLWXqATsaQODPQXKc0=
Subject key identifier: 87:69:EE:04:2F:F1:78:D5:30:2B:A7:07:30:F6:C5:C3:64:29:C8:16
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Certificate issuer: /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial: 019E20913565AFE363BBDCB7079C947EEA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 09:00:47 +0000
Manifest this update: Wed 13 May 2026 09:00:47 +0000
Manifest next update: Thu 14 May 2026 09:00:47 +0000
Files and hashes: 1: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl (hash: GGOSI/IVOCdVKoq5SBF0rlJ1U+WMwB/x9KtMXci1AQY=)
2: mlSBu9TMzRv1cMksxUNnCbKCFl0.roa (hash: 2BjuTtcqQP3+XgVLMLJcS2zD2YXPkZIw27QDfsAhCoI=)
3: q8bxI4KwUJabKAhcIRxGXIBY40U.roa (hash: ptYSizJNQ3Kc8/zLMIQuVYyw+eoexSAPxfZlEWXvP/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:35:65:af:e3:63:bb:dc:b7:07:9c:94:7e:ea:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Validity
Not Before: May 13 09:00:47 2026 GMT
Not After : May 14 09:00:47 2026 GMT
Subject: CN=8769ee042ff178d5302ba70730f6c5c36429c816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:56:0e:72:3e:eb:99:2e:cf:de:62:80:72:fe:
e5:c0:a3:83:be:9e:10:cf:ac:c1:93:5f:40:29:d2:
b7:75:71:77:c8:dd:77:89:40:ed:94:f2:ab:ee:21:
00:fd:2c:39:68:9f:ac:25:5d:59:d2:e2:81:28:84:
dc:12:60:6f:57:2b:d6:62:dc:ff:de:46:32:1f:99:
2c:5e:47:00:60:ac:c8:02:a4:88:ce:91:91:98:b8:
c2:91:b8:28:53:a1:e2:4c:9f:ab:3d:a9:e6:93:7e:
c6:f9:63:d2:d6:de:d9:98:42:db:1d:88:96:ed:c9:
0a:38:b7:4c:6f:8e:93:60:fa:ea:66:d1:79:04:a0:
95:a1:56:b1:bd:62:70:de:f6:52:39:7a:f3:21:22:
11:2a:28:f3:4f:66:99:54:64:65:be:a9:46:91:9c:
c3:3c:66:b6:f6:a1:fb:84:99:63:f9:cf:ba:f5:ee:
56:7c:0f:ce:dc:2f:49:d9:32:bd:1b:fd:df:de:a7:
e2:89:10:f2:d2:1e:14:4f:64:32:cc:a7:3f:8b:6c:
21:ed:25:68:53:72:b8:c3:84:50:71:dc:b8:ed:79:
f6:4a:a3:fb:16:c3:52:9d:bf:e3:c3:3a:60:06:7a:
a2:2f:4d:a7:b0:96:f2:ac:a1:54:35:26:bb:b0:fb:
75:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:69:EE:04:2F:F1:78:D5:30:2B:A7:07:30:F6:C5:C3:64:29:C8:16
X509v3 Authority Key Identifier:
keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2e:92:00:da:fb:d9:89:30:65:15:c6:e7:c1:cd:9e:1d:5c:
02:17:a6:a9:be:9e:c6:af:0e:c5:5f:0d:30:4f:46:83:8d:77:
9d:15:8c:33:1c:b8:78:6c:55:9a:61:1c:08:80:4a:4f:8e:3a:
ee:a8:c2:0a:a4:d1:74:de:bf:f1:a0:9c:50:3e:b0:4c:f7:62:
85:ef:39:1a:85:5c:b1:df:d9:93:a6:cf:f1:c3:c1:31:d5:1b:
c1:77:55:37:0f:25:38:a3:8d:00:55:29:94:ea:31:4b:be:2f:
ba:f9:95:44:12:a6:ba:46:d3:44:25:28:ea:38:8c:da:cf:95:
40:a3:98:dd:9e:86:b5:6b:41:34:ed:7a:d7:33:1d:b5:7f:34:
1f:73:a4:70:92:80:6b:37:fa:ec:d7:45:5b:f1:66:16:d5:3b:
9f:71:a1:3e:a6:89:d7:d0:96:87:ae:fd:09:83:c8:05:5a:19:
aa:92:b0:31:24:53:86:b4:33:2a:26:be:da:89:93:d1:5c:91:
6c:2c:30:a3:56:e4:80:ae:30:ca:28:fa:e6:79:da:de:70:3f:
82:6f:63:a2:56:db:af:0a:1e:0e:25:97:ad:ad:98:88:4d:53:
f7:1f:75:36:9c:e2:e2:b8:cc:93:d1:85:b1:02:39:0f:3e:b7:
1d:f5:ad:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:20:25 2026 by rpki-client